What is CVE-2020-13176?

CVE-2020-13176 is a medium-severity vulnerability in Teradici Cloud Access Connector, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-08-11.

How severe is CVE-2020-13176?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Teradici Cloud Access Connector

CVE-2020-13176

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (53.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Teradici Cloud_access_connector
Teradici Cloud_access_connector_legacy
N/a - Cloud Access Connector Legacy — versions Cloud Access Connector Legacy prior to April 24, 2020, Cloud Access Connector, v16 and earlier)

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@teradici.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-13176?: CVE-2020-13176 is a medium-severity vulnerability in Teradici Cloud Access Connector, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-08-11.
How severe is CVE-2020-13176?: Medium severity. CVSS v3 base score is 6.1 out of 10.